How not to handle a critical security vulnerability

1 pointsby funnyshit101vor 13 Jahren-1 comments

[1] http://www.webhostingtalk.com/showthread.php?t=1275572 [2] http://localhost.re/p/zamfoo-120-vulnerability

tl;dr security researcher reports critical root vulnerability to Zamfoo (a tacky yet popular plugin for a hosting control panel) software developer two weeks ago, no action is taken, "in the queue", two weeks expired software developer starts threats "You publish a vulnerability your done forever. You threaten us again and your done forever."

Now threatening legal action and so forth.

0 comments

—